TWiki User Authentication
| ||Tracking by IP address is an experimental feature, enabled in |
lib/TWiki.cfg. It lets you combine open access to some functions, with authentication on others, with full user activity tracking:
- Normally, the
REMOTE_USER environment variable is set for the scripts that are under authentication. If, for example, the
preview scripts are authenticated, but not
view, you would get your WikiName in
preview for the
%WIKIUSERNAME% variable, but
view will show
TWikiGuest instead of your WikiName.
| || |
- TWiki can be configured to remember the IP address/username pair whenever an authentication happens (edit topic, attach file). Once remembered, the non-authenticated scripts, like
view, will show the correct username instead of TWikiGuest.
| || |
- Enable this feature by setting the
$doRememberRemoteUser flag in
TWiki.cfg. TWiki then persistently stores the IP address/username pairs in the file,
$remoteUserFilename, which is
"$dataDir/remoteusers.txt" by default.
- Copy the
view script to
viewauth (or better, create a symbolic link)
viewauth to the list of authenticated scripts in the
twiki/bin/.htaccess file. The
view script should not be listed in the
| || |
Quick Authentication Test - Use the %WIKIUSERNAME% variable to return your current identity:
- This approach can fail if the IP address changes due to dynamically assigned IP addresses or proxy servers.